The California Office of the Attorney General reported a data breach involving City College of San Francisco on June 25, 2019. The breach, which occurred on February 11, 2019, involved unauthorized access to an employee's email account potentially exposing personal information including names and addresses. The exact number of individuals affected is currently unknown.

On May 13, 2016, the California Office of the Attorney General disclosed a data breach at City College of San Francisco (CCSF). The incident originated from an employee falling victim to a phishing scam, inadvertently compromising sensitive student information. The exposed data may have included names, addresses, and Social Security numbers (SSNs), though the exact number of affected individuals remains undetermined. The breach highlights vulnerabilities in employee cybersecurity awareness, as the phishing attack successfully bypassed institutional safeguards. While the full scope of the damage—such as potential identity theft or financial fraud—is unclear, the exposure of personally identifiable information (PII) poses significant risks to the affected students. The college likely faced reputational harm and potential legal repercussions under data protection regulations. No evidence suggests ransomware or a broader systemic attack, but the incident underscores the critical need for robust phishing prevention training and incident response protocols in educational institutions handling sensitive data.